← Back to browse · API

CVE-2022-43939

Severity
HIGH
CVSS
8.6
EPSS
0.92266
Risk score
57.29
CISA KEV
Yes
PoC
No
Published
2023-04-03
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2022-46909, GHSA-R7CQ-76XJ-2G24
Products
Hitachi Vantara:Pentaho Business Analytics (BA) Server, Hitachi Vantara:Pentaho Business Analytics Server 1.0 <9.3.0.2, Hitachi Vantara:Pentaho Business Analytics Server 9.4.0.0 <9.4.0.1
Sources
cisa.gov CVE-2022-43939
euvd EUVD-2022-46909

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

References